2026-08-30_0c76f1b8c09d4b9b78ae0c0bac66b557_amadey_darkgate_dragonforce_elex_glassworm_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_0c76f1b8c09d4b9b78ae0c0bac66b557_amadey_darkgate_dragonforce_elex_glassworm_luca-stealer_lynx_njrat
Size 1.1MB
Sample260830-1tel8aam6y
SHA256 cbe6f04a858e70bd463d89528a9baaec67c9139a1745bb6039bcdd5e48d9b021
MD5 0c76f1b8c09d4b9b78ae0c0bac66b557
SHA1 bdb12a3ea8fa1226ea689e81ccbe294bba79cf34
SHA512 9e90a3a2f167617977a7fa3e3d9f3e2d23295fe53306553f0750f4dbf0badd957dde9811e87aa6b4705ab9ddebad2984528ce97f0e607cebc15c89b093361501
SSDEEP 24576:ZAmPyt+fbk/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:Z7Pq+fbkLNiXicJFFRGNzj3
TLSH
T15635AF6031558635DBA1A0B0CD3AAAEE633CAD200B6658D767D43E6E3F705E33B35427
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_0c76f1b8c09d4b9b78ae0c0bac66b557_amadey_darkgate_dragonforce_elex_glassworm_luca-stealer_lynx_njrat

File Explorer

2026-08-30_0c76f1b8c09d4b9b78ae0c0bac66b557_amadey_darkgate_dragonforce_elex_glassworm_luca-stealer_lynx_njrat

.exe 1.1MB

2026-08-30_0c76f1b8c09d4b9b78ae0c0bac66b557_amadey_darkgate_dragonforce_elex_glassworm_luca-stealer_lynx_njrat

IMPHASH bf9bbf62ea6852dd5d95f2a37141ab26
SHA256 cbe6f04a858e70bd463d89528a9baaec67c9139a1745bb6039bcdd5e48d9b021
MD5 0c76f1b8c09d4b9b78ae0c0bac66b557
SHA1 bdb12a3ea8fa1226ea689e81ccbe294bba79cf34
SHA512 9e90a3a2f167617977a7fa3e3d9f3e2d23295fe53306553f0750f4dbf0badd957dde9811e87aa6b4705ab9ddebad2984528ce97f0e607cebc15c89b093361501
SSDEEP 24576:ZAmPyt+fbk/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:Z7Pq+fbkLNiXicJFFRGNzj3
TLSH
T15635AF6031558635DBA1A0B0CD3AAAEE633CAD200B6658D767D43E6E3F705E33B35427
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

285331

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\jenkins\build\workspace\miflash_git\out\Release\bin\(TargetName).pdb

libcef

cef_string_list_size cef_string_list_value cef_string_list_append cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_string_multimap_alloc cef_string_multimap_free cef_uriencode cef_base64encode cef_enable_highdpi_support cef_quit_message_loop cef_run_message_loop cef_shutdown cef_initialize cef_execute_process cef_api_hash cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_request_context_get_global_context cef_log cef_browser_view_get_for_browser cef_string_userfree_utf16_free cef_browser_host_create_browser cef_string_list_free cef_string_list_alloc cef_string_utf16_cmp cef_string_utf8_clear cef_string_utf16_to_utf8 cef_string_utf8_to_utf16 cef_string_ascii_to_utf16 cef_string_utf16_clear cef_string_utf16_set

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

kernel32

GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetConsoleMode HeapSize WriteConsoleW GetFileSizeEx SetStdHandle SetEnvironmentVariableW WriteFile CreateFileW CloseHandle HeapFree HeapAlloc GetProcessHeap CreateDirectoryW WritePrivateProfileStringW GetCommandLineW GetCurrentProcess GetModuleFileNameW GetUserDefaultLocaleName CreateMutexW FormatMessageW GetTimeZoneInformation GetLastError VerSetConditionMask GetModuleHandleW WideCharToMultiByte VerifyVersionInfoW IsWow64Process SetLastError FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetFileType GetStdHandle GetModuleHandleExW ExitProcess LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetProcAddress CreateEventW WaitForSingleObjectEx ResetEvent SetEvent InitializeCriticalSectionAndSpinCount GetCPInfo GetStringTypeW LCMapStringEx MultiByteToWideChar DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection

user32

SetWindowTextW GetSystemMetrics MessageBoxW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_0c76f1b8c09d4b9b78ae0c0bac66b557_amadey_darkgate_dragonforce_elex_glassworm_luca-stealer_lynx_njrat

libcef

iphlpapi

version

kernel32

user32

generic